View Single Post
  #4   (View Single Post)  
Old 14th January 2013
J65nko J65nko is offline
Administrator
 
Join Date: May 2008
Location: Budel - the Netherlands
Posts: 4,131
Default

http://en.wikipedia.org/wiki/DNSBL#DNSBL_queries describes that most DNSBLs return a 127.0.0.0/8 address as indicator that the IP adress is been listed in their database.
It also refers to RFC 5782 for the full technical details.

At this moment the 125.175.43.40 IP address is not been listed at all:

Code:
$  ./blcheck 125.175.43.40                               
IP 125.175.43.40 NAME ---
2013-01-14_15:49:28_UTC 40.43.175.125.cbl.abuseat.org.         ---
2013-01-14_15:49:28_UTC 40.43.175.125.dnsbl.sorbs.net.         ---
2013-01-14_15:49:28_UTC 40.43.175.125.bl.spamcop.net.          ---
2013-01-14_15:49:28_UTC 40.43.175.125.zen.spamhaus.org.        ---
2013-01-14_15:49:28_UTC 40.43.175.125.combined.njabl.org.      ---
The 82.194.75.30 also is not listed:
Code:
./blcheck 82.194.75.30                                
IP 82.194.75.30 NAME hs-443.dedicated.hostalia.com.
2013-01-14_15:55:39_UTC 30.75.194.82.cbl.abuseat.org.          ---
2013-01-14_15:55:39_UTC 30.75.194.82.dnsbl.sorbs.net.          ---
2013-01-14_15:55:41_UTC 30.75.194.82.bl.spamcop.net.           ---
2013-01-14_15:55:41_UTC 30.75.194.82.zen.spamhaus.org.         ---
2013-01-14_15:55:41_UTC 30.75.194.82.combined.njabl.org.       ---
Please describe exactly what you did to get the 2013-01-11_15:08:54_UTC 30.75.194.82.bl.csma.biz. 208.91.197.19 result.
__________________
You don't need to be a genius to debug a pf.conf firewall ruleset, you just need the guts to run tcpdump
Reply With Quote